feat: bind persona control to authorization receipts

This commit is contained in:
冰朔 2026-08-12 04:36:45 +08:00
commit 099ed036b2
12 changed files with 248 additions and 15 deletions

View file

@ -174,9 +174,14 @@ binding, and finally invokes B0 partner deliberation. Unavailable, unbound, ambi
binding, and cognition failures stop at their own boundary; later stages are not invoked. Its successful result
is still a language-goal projection, not permission to perform a reality action. `PersonaLanguageShellPanel`
is now mounted from the Fifth Domain desktop source and receives the app's already-mounted repository roots and
configured provider metadata. It keeps `personaAuthorized=false`, exposes no execution callback, and hides the
reality confirmation surface because no durable confirmation consumer is wired. This proves source integration,
not a real persona manifest binding, installed desktop runtime, or acceptance.
configured provider metadata. It has no native persona-control authorization receipt loader, exposes no execution
callback, and hides the reality confirmation surface because no durable confirmation consumer is wired. This
proves source integration, not a real persona manifest binding, installed desktop runtime, or acceptance.
`src/lib/personaControlAuthorization.ts` removes the desktop coordinator's caller-supplied authorization boolean.
It accepts only a current `GUANGHU_OS` verification receipt bound to the exact persona, human responsibility
subject, repository head, model instance, request and language anchor. Missing, stale or mismatched evidence
remains system-direct. This is a source contract; it does not claim persona-primary runtime control exists.
Tolaria is a personal knowledge and life management desktop app. It reads a vault of markdown files with YAML frontmatter and presents them in a four-panel UI inspired by Bear Notes.